Kristof Provost a0bf3ee425 Evaluate packet size after the firewall had its chance in the ip6 fast path ...

Defer the packet size check until after the firewall has had a look at it. This
means that the firewall now has the opportunity to (re-)fragment an oversized
packet.
This mirrors what the slow path does.

Reviewed by:	ae
MFC after:	1 week
Differential Revision:	https://reviews.freebsd.org/D12779

2017-10-25 19:21:48 +00:00

..

dest6.c

…

frag6.c

When IPv6 fragments reassembly is complete, update mbuf's csum_data

2017-02-28 22:58:19 +00:00

icmp6.c

Fix two places in the ICMP6 code where we could dereference a NULL pointer

2017-05-30 14:41:31 +00:00

icmp6.h

…

in6_cksum.c

Renumber copyright clause 4

2017-02-28 23:42:47 +00:00

in6_fib.c

Renumber copyright clause 4

2017-02-28 23:42:47 +00:00

in6_fib.h

Renumber copyright clause 4

2017-02-28 23:42:47 +00:00

in6_gif.c

…

in6_ifattach.c

Garbage collect IFT_IEEE80211 (but leave the define for possible reuse)

2017-01-28 17:08:40 +00:00

in6_ifattach.h

Get closer to a VIMAGE network stack teardown from top to bottom rather

2016-06-21 13:48:49 +00:00

in6_jail.c

Allow explicitly assigned IPv6 loopback address to be used in jails

2017-03-31 09:10:05 +00:00

in6_mcast.c

Add missing braces around MCAST_EXCLUDE check when KTR support is

2017-05-13 18:41:24 +00:00

in6_pcb.c

Remove register keyword from sys/ and ANSIfy prototypes

2017-05-17 00:34:34 +00:00

in6_pcb.h

The patch provides the same socket option as Linux IP_ORIGDSTADDR.

2017-03-06 04:01:58 +00:00

in6_pcbgroup.c

Unbreak the RSS/PCBGROUp build.

2016-03-31 00:53:23 +00:00

in6_proto.c

Renumber copyright clause 4

2017-02-28 23:42:47 +00:00

in6_rmx.c

…

in6_rss.c

…

in6_rss.h

…

in6_src.c

Constrain IPv6 routes to single FIBs when net.add_addr_allfibs=0

2017-03-17 16:50:37 +00:00

in6_var.h

Renumber copyright clause 4

2017-02-28 23:42:47 +00:00

in6.c

Constrain IPv6 routes to single FIBs when net.add_addr_allfibs=0

2017-03-17 16:50:37 +00:00

in6.h

The patch provides the same socket option as Linux IP_ORIGDSTADDR.

2017-03-06 04:01:58 +00:00

ip6_ecn.h

…

ip6_fastfwd.c

Evaluate packet size after the firewall had its chance in the ip6 fast path

2017-10-25 19:21:48 +00:00

ip6_forward.c

Merge projects/ipsec into head/.

2017-02-06 08:49:57 +00:00

ip6_gre.c

…

ip6_id.c

sys/net*: minor spelling fixes.

2016-05-03 18:05:43 +00:00

ip6_input.c

Renumber copyright clause 4

2017-02-28 23:42:47 +00:00

ip6_mroute.c

Renumber copyright clause 4

2017-02-28 23:42:47 +00:00

ip6_mroute.h

…

ip6_output.c

After inpcb route caching was put back in place there is no need for

2017-07-27 13:03:36 +00:00

ip6_var.h

Renumber copyright clause 4

2017-02-28 23:42:47 +00:00

ip6.h

…

ip6protosw.h

Renumber copyright clause 4

2017-02-28 23:42:47 +00:00

ip_fw_nat64.h

Add ipfw_nat64 module that implements stateless and stateful NAT64.

2016-08-13 16:09:49 +00:00

ip_fw_nptv6.h

Add ipfw_nptv6 module that implements Network Prefix Translation for IPv6

2016-07-18 19:46:31 +00:00

mld6_var.h

…

mld6.c

Renumber copyright clause 4

2017-02-28 23:42:47 +00:00

mld6.h

…

nd6_nbr.c

Constrain IPv6 routes to single FIBs when net.add_addr_allfibs=0

2017-03-17 16:50:37 +00:00

nd6_rtr.c

Constrain IPv6 routes to single FIBs when net.add_addr_allfibs=0

2017-03-17 16:50:37 +00:00

nd6.c

Constrain IPv6 routes to single FIBs when net.add_addr_allfibs=0

2017-03-17 16:50:37 +00:00

nd6.h

Constrain IPv6 routes to single FIBs when net.add_addr_allfibs=0

2017-03-17 16:50:37 +00:00

pim6_var.h

…

pim6.h

…

raw_ip6.c

Remove register keyword from sys/ and ANSIfy prototypes

2017-05-17 00:34:34 +00:00

raw_ip6.h

…

route6.c

…

scope6_var.h

…

scope6.c

…

sctp6_usrreq.c

Fix a locking issue found by Coverity scanning the usrsctp library.

2017-09-09 20:51:54 +00:00

sctp6_var.h

Use consistently uint32_t for mtu values.

2017-04-26 19:26:40 +00:00

send.c

Hide struct socket and struct unpcb from the userland.

2017-10-02 23:29:56 +00:00

send.h

…

tcp6_var.h

Renumber copyright clause 4

2017-02-28 23:42:47 +00:00

udp6_usrreq.c

Enforce the limit on ICMP messages before doing work to formulate the

2017-05-30 14:32:44 +00:00

udp6_var.h

Renumber copyright clause 4

2017-02-28 23:42:47 +00:00